Zimbra Collaboration Suite Local File Inclusion Vulnerability Exploited

A Local File Inclusion (LFI) vulnerability (CVE-2025-68645) has been identified in the Zimbra Collaboration Suite Webmail Classic UI, allowing unauthenticated attackers to exploit user-supplied request parameters. Successful exploitation may lead to the leakage of sensitive files and further compromise of the targeted environment. Active exploitation has been observed, and a public proof-of-concept exploit is available.